Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          YT3dawp8KRDPSsUtajk9H04cipOIYlV4pa2mUAHVPLY=
Subject key identifier:   6F:DF:CE:6F:79:23:EB:52:E8:EF:D9:6A:47:CF:E5:51:CD:E0:D7:4D
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1151F800F24BFB81E9422E62E5BCC969E07063A8
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        177.66.115.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:f8:00:f2:4b:fb:81:e9:42:2e:62:e5:bc:c9:69:e0:70:63:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:11:12:8f:25:66:8f:9a:83:b6:0b:08:82:
                    be:35:36:9a:de:fa:a5:08:b7:c7:03:b0:aa:8c:0d:
                    0e:ff:c1:6d:ad:d8:4b:3c:ba:6e:2c:b3:cf:7e:ee:
                    f1:62:38:8f:99:68:16:c9:88:55:2e:e0:e7:f8:6f:
                    3d:3e:a6:f7:08:08:c3:e3:90:cb:10:f9:80:95:89:
                    f9:a2:18:26:6b:9a:0d:63:42:60:06:f0:77:0c:be:
                    db:c9:ca:00:96:ed:7c:0a:bf:67:67:a0:34:74:e1:
                    e7:12:ca:da:c9:4b:58:6a:c3:32:16:4b:2f:f7:08:
                    e5:7e:72:c8:79:79:e2:c3:3a:42:48:9a:34:48:11:
                    c5:29:97:dd:bc:f8:cf:f6:74:8e:09:dc:bc:b8:85:
                    b1:af:89:a9:2b:77:c1:8e:ab:ed:db:86:54:0f:ce:
                    9c:24:1f:66:8f:78:7c:1b:2f:1a:f6:0b:e6:37:a2:
                    a0:fc:b4:2e:49:30:12:89:41:1e:e6:ca:5d:92:31:
                    fe:7b:c2:b0:c1:ff:ae:b0:11:34:33:94:4c:a0:58:
                    d7:82:ec:ea:ea:98:ca:de:35:dc:b9:af:e3:94:c6:
                    17:e5:74:f6:b5:25:80:88:c5:d3:62:a7:03:ea:68:
                    f3:85:3b:b1:a3:b6:00:fb:b0:38:de:b8:a7:db:ce:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DF:CE:6F:79:23:EB:52:E8:EF:D9:6A:47:CF:E5:51:CD:E0:D7:4D
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:3d:83:20:ba:17:40:10:9b:a4:6c:15:0f:2c:79:53:72:
         9b:24:aa:f2:37:45:95:d4:db:ad:13:cd:bd:f6:67:46:94:66:
         f9:36:57:fc:a8:f7:57:e9:a4:c8:9b:66:ae:5e:58:f7:9a:13:
         54:e0:7e:26:99:24:6e:23:43:17:3c:e0:50:8b:9d:c1:c3:b3:
         34:9b:e0:1a:aa:f0:61:3d:81:55:85:d4:80:18:f1:04:9a:34:
         9f:4b:9d:f6:09:34:fb:2f:b3:3b:4c:d9:e0:b0:e9:f7:ba:bc:
         37:a6:be:e0:d7:7a:18:d9:58:78:09:b5:2e:8c:57:0f:02:f5:
         5e:e9:1c:bc:1d:63:1c:06:78:ec:f2:0c:9d:b5:28:ad:6d:bc:
         4b:d9:de:e4:83:31:f5:03:ba:ed:1e:ce:39:e8:53:f4:f0:98:
         97:ca:5d:76:91:68:cd:f9:dd:5c:b7:30:55:e5:fd:0e:21:e8:
         06:63:c4:9d:a5:38:1f:b8:3b:63:75:e9:68:87:52:17:80:c6:
         7b:fd:07:06:d1:1b:2e:38:34:b6:6e:6e:a7:8c:a7:84:33:46:
         ac:aa:bb:b8:b6:f8:12:ae:fa:19:b0:81:af:8a:a3:3e:57:fd:
         5b:d2:73:36:00:7c:41:04:4c:06:4e:e6:2f:3e:6e:c3:dc:91:
         6b:13:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org